Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/3133382e302e37322e302f32322d3332203d3e20323634353331.roa
File:                     3133382e302e37322e302f32322d3332203d3e20323634353331.roa (raw, json)
Hash identifier:          ws13/Y9PdSkwXG/EkX5KLQQynEeZGqRNpQpSgcgt8Fg=
Subject key identifier:   BA:97:F1:02:CE:2E:00:5A:CE:EF:03:DA:97:AC:CC:5F:D6:DB:94:55
Certificate issuer:       /CN=678744E2F008A98B388D024DEEAB7AEEF09D3883
Certificate serial:       1F8BCFFF61A6C70B6E462A833C0D50F6A5F21565
Authority key identifier: 67:87:44:E2:F0:08:A9:8B:38:8D:02:4D:EE:AB:7A:EE:F0:9D:38:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/3133382e302e37322e302f32322d3332203d3e20323634353331.roa
Signing time:             Thu 06 Mar 2025 02:44:28 +0000
ROA not before:           Thu 06 Mar 2025 02:39:28 +0000
ROA not after:            Thu 05 Mar 2026 02:44:28 +0000
asID:                     264531
IP address blocks:        138.0.72.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.crl
                          rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 05:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8b:cf:ff:61:a6:c7:0b:6e:46:2a:83:3c:0d:50:f6:a5:f2:15:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678744E2F008A98B388D024DEEAB7AEEF09D3883
        Validity
            Not Before: Mar  6 02:39:28 2025 GMT
            Not After : Mar  5 02:44:28 2026 GMT
        Subject: CN=BA97F102CE2E005ACEEF03DA97ACCC5FD6DB9455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d4:3b:fa:a6:9e:0b:bf:8a:ad:b2:f0:3a:92:
                    1c:55:4a:2a:04:c0:e8:91:1f:4a:64:d3:13:23:f5:
                    05:e2:f8:70:f1:0c:19:1f:26:64:47:7d:ab:07:42:
                    d8:4f:62:f6:17:31:b5:7e:92:b6:e2:45:bb:c9:dd:
                    d8:b5:c2:26:62:5b:67:33:18:c0:8d:87:22:dd:bb:
                    01:2e:90:8a:6e:ea:5b:33:03:f2:df:da:64:1b:96:
                    85:30:46:d1:a0:2e:79:b3:29:6d:25:33:ae:3a:81:
                    d2:2c:e6:86:83:58:16:45:8e:9b:20:41:ed:7c:78:
                    57:d1:1a:29:d2:c6:2c:c6:4a:3e:be:34:2c:6f:ca:
                    53:e6:68:ee:f3:11:ff:ed:bf:74:74:71:85:92:7f:
                    e6:cf:eb:49:ed:d9:b9:eb:79:1d:bc:ca:60:f6:84:
                    43:ed:18:4f:c4:0b:66:cc:08:31:40:ad:03:3c:32:
                    b4:ec:e8:97:c4:f4:03:d0:62:b1:7c:a9:a6:a4:c7:
                    7a:04:31:9e:0a:25:e2:fd:0c:20:5c:b7:9b:ce:69:
                    2b:b7:9c:54:98:b2:30:e9:50:f3:6c:a4:5c:da:da:
                    4a:b6:1a:21:bd:09:bb:0c:58:90:99:1b:69:54:c2:
                    59:30:36:e6:94:f7:57:e5:17:b8:08:13:43:21:44:
                    3e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:97:F1:02:CE:2E:00:5A:CE:EF:03:DA:97:AC:CC:5F:D6:DB:94:55
            X509v3 Authority Key Identifier:
                keyid:67:87:44:E2:F0:08:A9:8B:38:8D:02:4D:EE:AB:7A:EE:F0:9D:38:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/3133382e302e37322e302f32322d3332203d3e20323634353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:51:54:65:f9:3b:d8:4a:f7:58:63:a9:9a:da:fa:48:1f:22:
         53:89:ab:40:b3:67:2a:2f:12:b0:cd:a3:5e:f4:53:e5:d6:2e:
         b1:e6:af:02:77:ef:cd:b2:40:38:ad:79:dc:39:83:0f:c2:d8:
         a9:74:8b:2c:7c:9f:4f:f7:24:99:62:da:2d:fa:ab:6d:34:cb:
         61:79:33:b2:d1:5f:a8:94:de:8e:2e:68:79:64:c1:7f:fc:26:
         2d:18:91:11:a3:42:3a:a4:05:64:bb:45:cd:46:01:b9:a3:eb:
         4d:e4:be:78:cd:29:75:8b:fb:73:49:b1:96:51:24:a8:d5:80:
         05:8f:49:e0:d1:6a:3f:b9:76:4c:3d:ea:77:5e:01:f6:20:92:
         99:a7:f1:0b:b0:9e:e6:dd:9c:fc:6f:5a:55:7f:93:44:92:98:
         bc:87:6e:ee:1a:13:18:11:50:e2:4f:04:f1:77:fe:77:ef:b1:
         76:80:3d:ba:7e:aa:f2:06:3c:25:70:f0:3f:c0:31:8f:c7:39:
         64:8d:98:2b:d9:c7:c7:1a:45:0d:5e:69:41:37:86:18:33:a9:
         58:ba:0a:bc:1f:05:03:7c:4f:58:a7:49:71:d7:51:cb:9c:89:
         e6:ef:33:e7:0c:09:73:7f:3e:c2:ea:f4:53:7a:27:c9:ec:9d:
         0a:c6:91:42
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUH4vP/2GmxwtuRiqDPA1Q9qXyFWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc4NzQ0RTJGMDA4QTk4QjM4OEQwMjRERUVBQjdBRUVG
MDlEMzg4MzAeFw0yNTAzMDYwMjM5MjhaFw0yNjAzMDUwMjQ0MjhaMDMxMTAvBgNV
BAMTKEJBOTdGMTAyQ0UyRTAwNUFDRUVGMDNEQTk3QUNDQzVGRDZEQjk0NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN1Dv6pp4Lv4qtsvA6khxVSioE
wOiRH0pk0xMj9QXi+HDxDBkfJmRHfasHQthPYvYXMbV+krbiRbvJ3di1wiZiW2cz
GMCNhyLduwEukIpu6lszA/Lf2mQbloUwRtGgLnmzKW0lM646gdIs5oaDWBZFjpsg
Qe18eFfRGinSxizGSj6+NCxvylPmaO7zEf/tv3R0cYWSf+bP60nt2bnreR28ymD2
hEPtGE/EC2bMCDFArQM8MrTs6JfE9APQYrF8qaakx3oEMZ4KJeL9DCBct5vOaSu3
nFSYsjDpUPNspFza2kq2GiG9CbsMWJCZG2lUwlkwNuaU91flF7gIE0MhRD51AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUupfxAs4uAFrO7wPal6zMX9bblFUwHwYDVR0j
BBgwFoAUZ4dE4vAIqYs4jQJN7qt67vCdOIMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmJRRkpzZGloWFBKN3RveWNZNnZUY0hVZVJ5VFFyS3hSNldxcGRLZ3Z3
NkgvMS82Nzg3NDRFMkYwMDhBOThCMzg4RDAyNERFRUFCN0FFRUYwOUQzODgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3ODc0NEUyRjAwOEE5OEIz
ODhEMDI0REVFQUI3QUVFRjA5RDM4ODMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JiUUZKc2RpaFhQSjd0b3ljWTZ2VGNIVWVSeVRRckt4UjZXcXBkS2d2dzZILzEv
MzEzMzM4MmUzMDJlMzczMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM1
MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAooASDANBgkqhkiG9w0BAQsFAAOCAQEAd1FUZfk72Er3
WGOpmtr6SB8iU4mrQLNnKi8SsM2jXvRT5dYuseavAnfvzbJAOK153DmDD8LYqXSL
LHyfT/ckmWLaLfqrbTTLYXkzstFfqJTeji5oeWTBf/wmLRiREaNCOqQFZLtFzUYB
uaPrTeS+eM0pdYv7c0mxllEkqNWABY9J4NFqP7l2TD3qd14B9iCSmafxC7Ce5t2c
/G9aVX+TRJKYvIdu7hoTGBFQ4k8E8Xf+d++xdoA9un6q8gY8JXDwP8Axj8c5ZI2Y
K9nHxxpFDV5pQTeGGDOpWLoKvB8FA3xPWKdJcddRy5yJ5u8z5wwJc38+wur0U3on
yeydCsaRQg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:11 2025 by rpki-client